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CLAIMS 

Therefore, having thus described the invention, at least the following is claimed: 



1 LA method for providing information on system vulnerabilities, 

2 comprising: 

3 populating a database with element or system vulnerability information; 

4 obtaining keywords from profile or policy-descriptive information for the 

5 system; and 

6 selecting a database page to access from a database structure configured as a 

7 hierarchical plurality of database pages, each database page having a page index, data 

8 section and selector section, and utilizing keyword matching between the descriptive 

9 information and selector section to obtain vulnerability information for an element or 
1 0 combination of elements. 

1 2. The method of claim 1, further comprising storing intermediate result or status 

2 information obtained from the selecting step in a state accumulator module. 

1 3. The method of claim 2, further comprising performing a check of the state 

2 accumulator module for intermediate result or status information. 

1 4. The method of claim 3, wherein the selecting step further comprises matching 

2 keywords utilizing result or status information stored in the state accumulator module. 

1 5. The method of claim 4, further comprising sending the vulnerability 

2 information to a vulnerability accumulator module; 

3 retaining page selector information for database pages accessed; and 

4 updating intermediate result or status information in the state accumulator 

5 module. 

1 6. The method of claim 5, further comprising detecting a selection of input from 

2 a user, including profile or policy-descriptive system information provided by the 

3 user, to continue the obtaining keywords step and selecting step for same element. 
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1 7. The method of claim 1, further comprising repeating the obtaining keywords 

2 step and selecting step for another element or element combination. 

1 8. The method of claim 1, further comprising updating at least one of an element 

2 counter value, combination counter value, cycle counter value, or cumulative cycle 

3 counter value. 

1 9. The method of claim 5, further comprising updating the database with an 

2 element counter value. 

1 10. The method of claim 9, further comprising updating the database with list of 

2 database pages or indices accessed to provide for accumulated vulnerability results for 

3 examined element or system. 

1 11. The method of claim 10, further comprising presenting the accumulated 

2 vulnerability results to a user's processing device. 

1 1 2. The method of claim 1, further comprising filtering information on the element 

2 or combination of elements prior to performing the obtaining keywords step. 

1 13. The method of claim 2, further comprising identifying and selecting particular 

2 combinations of system elements to process based on vulnerability information 

3 obtained from the database as well as on state information stored in the state 

r' 

4 accumulator. 
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1 14. A computer-readable medium having a computer program for providing 

2 information on system vulnerabilities for performing the steps of: 

3 logic configured to populate a database with element or system vulnerability 

4 information; 

5 logic configured to query a database to obtain descriptive information for the 

6 system; 

7 logic configured to select a database page to access from a database structure 

8 configured as a hierarchical plurality of database pages, each database page having a 

9 page index, data section and selector section; and 

10 logic configured to perform keyword matching between the descriptive 

1 1 information and selector section to obtain vulnerability information for an element or 

12 combination of elements. 

1 15. The computer-readable medium of claim 14, further comprising logic 

2 configured to store intermediate result or status information obtained from the select 

3 logic in a state accumulator module. 

1 16. The computer-readable medium of claim 15, further comprising logic 

2 configured to perform a check of a state accumulator module for intermediate result or 

3 status information. 

1 17. The computer-readable medium of claim 16, wherein the logic configured to 

2 select from a database page to access is further configured to match keywords utilizing 

3 result or status information stored in the state accumulator module. 

1 18. The computer-readable medium of claim 17, further comprising logic 

2 configured to send the vulnerability information to a vulnerability accumulator 

3 module; 

4 logic configured to retain page selector information for database pages 

5 accessed; and 

6 logic configured to update intermediate result or status information in the state 

7 accumulator module. 
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1 19. The computer-readable medium of claim 18, further comprising logic 

2 configured to detect a selection of input from a user, including profile/policy- 

3 descriptive system information provided by the user, to continue the performing of 

4 query logic and select logic for same element. 

1 20. The computer-readable medium of claim 14, further comprising logic 

2 configured to continue cycling by repeating the performing of query logic and select 

3 logic for another element or element combination. 

1 21. The computer-readable medium of claim 14, further comprising logic 

2 configured to update at least one of an element counter value, combination counter 

3 value, cycle counter value, or cumulative cycle counter value. 

1 22. The computer-readable medium of claim 18, further comprising logic 

2 configured to update the database with at least one of an element counter value, 

3 combination counter value, cycle counter value, or cumulative cycle counter value. 

1 23. The computer-readable medium of claim 22, further comprising logic 

2 configured to update the database with list of database pages or indices accessed to 

3 provide for accumulated vulnerability results for examined element or system. 

1 24. The computer-readable medium of claim 23, further comprising logic 

2 configured to present the accumulated vulnerability results to a user's processing 

3 device. 

1 25. The computer-readable medium of claim 14, further comprising logic 

2 configured to filter information on the element or combination of elements prior to 

3 performing the query logic. 
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1 26. A system for providing information on system vulnerabilities, comprising: 

2 a database populated with descriptive system information; 

3 a database structure configured as a hierarchical plurality of database pages, 

4 each database page further comprises a page index, data section and selector section, 

5 and wherein the data section is further configured to include the element vulnerability 

6 information and the selector section is further configured to include links to related 

7 database pages; and 

8 a rule processor module configured to provide rules for cycling through the 

9 database structure to match keywords provided by user input, including profile/policy- 

10 descriptive system information provided by the user, and the descriptive system 

11 information from the database with element vulnerability information from the 

12 database structure. 

1 27. The system of claim 26, further comprising an input parser/filter module 

2 operatively coupled to the rule processor module, the input parser/filter module 

3 configured to receive policy or profile input from a user's processing device and to 

4 convert the input into data usable by the rule processor module. 

1 28. The system of claim 26, further comprising a state accumulator module 

2 operatively coupled to the rule processor module, the state accumulator module 

3 configured to store intermediate vulnerability status or result information. 

1 29. The system of claim 26, further comprising a vulnerability accumulator 

2 module operatively coupled to the rule processor module, the vulnerability 

3 accumulator module configured to store identified vulnerability result information. 

1 30. The system of claim 26, further comprising a presentation module operatively 

2 coupled to a user's processing device and the vulnerability accumulator module, the 

3 presentation module configured to summarize and format accumulated vulnerability 

4 results for utilization by the user's processing device. 
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1 31. The system of claim 26, further comprising a database interface module 

2 operatively coupled between the database, database structure, and the result 

3 accumulator module, the database interface module configured to enable provisioning 

4 and access to the database and the database structure. 

1 32. The system of claim 26, wherein the database comprises an element 

2 descriptive database (EDD). 

1 33. The system of claim 26, wherein the database structure comprises a 

2 hierarchical vulnerability database (HVD) structure. 

1 34. The system of claim 28, wherein the rules processor module is further 

2 configured to utilize accumulated state information from the state accumulator module 

3 to modify the matching or filtering of keywords, such that a likelihood of success of a 

4 probability of matching or filtering of keywords is changed based upon at least one of 

5 probabilistic, statistical, conditional pre-requisite item, occurrence, situation, or rules 

6 information. 
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1 35. A system for providing system vulnerability information, comprising: 

2 a database populated with descriptive system information; 

3 a database structure configured as hierarchical plurality of database pages, 

4 each database page including a page index, data section and selector section, and 

5 wherein the data section is further configured to include the element vulnerability 

6 information and the selector section is further configured to include links to related 

7 database pages; 

8 a rule processor module configured to provide rules for cycling through the 

9 database structure to match keywords provided by user input, including profile/policy- 

10 descriptive system information provided by the user, and the descriptive system 

11 information from the database with element vulnerability information from the 

1 2 database structure ; 

13 an input parser/filter module operatively coupled to the rule processor module, 

14 the input parser/filter module configured to receive policy or profile input from a 

15 user's processing device and to convert the input into data usable by the rule processor 

16 module; 

17 a state accumulator module operative coupled to the rule processor module, 

18 the state accumulator module configured to store intermediate vulnerability status and 

19 result information; and 

20 a vulnerability accumulator module operatively coupled to the rule processor 

21 module, the vulnerability accumulator module configured to store identified 

22 vulnerability result information. 

1 36. The system of claim 35, further comprising a presentation module operatively 

2 coupled to a user's processing device and the vulnerability accumulator module, the 

3 presentation module configured to summarize and format accumulated vulnerability 

4 results for utilization by the user's processing device. 

1 37. The system of claim 36, further comprising a database interface module 

2 operatively coupled between the database and database structure, and the result 

3 accumulator module, the database interface module configured to enable provisioning 

4 and access to the database and the database structure. 
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1 38. The system of claim 37, wherein the database comprises an element 

2 descriptive database (EDD). 

1 39. The system of claim 37, wherein the database structure comprises a 

2 hierarchical vulnerability database (HVD) structure. 
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